MAL-2025-38886 Malicious code in watermelon-ymh-project (npm)

The package watermelon-ymh-project was found to contain malicious code...